Slashdot Mirror

← Back to Stories (view on slashdot.org)

Victoria's Secret Fined for Security Leak

Posted by ryuzaki0 on from the untouchables dept.

An anonymous reader submits: "The state of New York has fined Victoria's Secret for failing tomaintain secure access to customer purchase records. Last year, a customer noticed that it was possible to look up online purchase records by manipulating their website. However, this was not consistent with the company's posted privacy policy. After getting brushed by VS's Customer Service, the guy contacted the media. NY State AG Eliot Spitzer took action under 1930s laws regarding deceptive business practices. VS settled to pay a $50 000 fine, notification of affected customers, fixing the site, and all without admitting violation of law."

3 of 52 comments (clear)

  1. VS might just recoup the $50K in a countersuit by RalphBNumbers · · Score: 3, Interesting

    This guy publicized a security flaw, why hasn't he been sued yet?

    --
    "The worst tyrannies were the ones where a governance required its own logic on every embedded node." - Vernor Vinge
  2. SLAPP, Politics, election year... by BrookHarty · · Score: 2, Interesting

    Just Curious, if the State needed the support of the company, wouldnt they go after you for some DMCA laws? (Election year and such)

    Could you use the SLAPP law argument against the STATE or Company?

    Just seems the politics has a hand in this, if it wasnt Victoria Secrets, but a law firm, the person who reported it could have been targeted as a criminal.

    Nice to see the law work correctly for once. But then, anything can happen...

  3. Why the hell is it by elmegil · · Score: 2, Interesting
    That corporations never have to admit guilt?

    If I break the law, I don't have the same luxury, how is this equal protection?

    --
    7 November 2006: The day Americans realized corruption and incompetence weren't addressing 11 September 2001